CVE catalog

CVE-2021-20179

UBUNTU-CVE-2021-20179

[CVE catalog]

Severity
High · CVSS 8.1CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Published
Updated
Source
[NVD] · [CVE record]
EPSS
1.22% · Oct 25, 2026

A flaw was found in pki-core. An attacker who has successfully compromised a key could use this flaw to renew the corresponding certificate over and over again, as long as it is not explicitly revoked. The highest threat from this vulnerability is to data confidentiality and integrity.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiandogtag-pki1110.10.2-2fixed
Ubuntudogtag-pkipro10.7.3-4vulnerable
Ubuntudogtag-pkipro10.8.3-1ubuntu1vulnerable
Ubuntudogtag-pkipro10.8.3-1ubuntu1+esm1fixed
Ubuntudogtag-pkipro10.7.3-4vulnerable
Ubuntudogtag-pkipro10.8.3-1ubuntu1vulnerable
Ubuntudogtag-pkipro10.8.3-1ubuntu1+esm1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiandogtag-pkideb1110.10.2-2Not reportedDEBIAN-CVE-2021-20179Not reported
Ubuntudogtag-pkidebpro10.8.3-1ubuntu1+esm1Not reportedUSN-8158-1Not reported
Ubuntudogtag-pkidebpro10.8.3-1ubuntu1+esm1Not reportedUBUNTU-CVE-2021-20179Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]